Average network traffic of specific port
Hello all, I am trying to find the average Mbit/s of traffic going to a specific udp port for the duration while traffic is going to another specific udp port. Could anyone help me? I know the summary tab will give me the average but its just about getting the filter correct I guess, thanks!
https://ask.wireshark.org/question/15...
Hello, thanks but that's not what I mean. Maybe I should be more clear. I'm trying to find the average Mbit/s for the traffic stream going into udp port 9. So the filter is udp.dstport == 9. But that just gets the average for all udp packets destined for port 9 for the duration of the capture. What I'm looking to find is the average Mbit/s for the traffic stream going to udp port 9 but only for the duration where there's also traffic going to udp port 7522. (This is to show the reduced data rate when there's other packets sent at the same time). I use (udp.dstport == 9) && (udp.dstport == 7522) but obviously that returns information for both which is not what I want since it's just udp port 9 but with the mentioned constraints. Sorry if this is confusing!
I think you want an I/O graph. Can you post an anonymous trace? Easier to show you.
Hi Bob the files quite large and my internet connection is very poor so I can't I'm afraid sorry. How would I go about doing it in an I/O graph could you tell me? One other way I was considering doing it was by finding out at what line the first and last packet were sent to udp port 7522 and then including this in my filter. So (udp.dst.port == 9) && (frame.number >= <7522firstLine#>) && (frame.number <= <7522lastLine#>) and then viewing the results in Statistics Summary. But I would of thought there was a more straightforward way to achieve the outcome than how I have described. Thanks!
You can specify a range for the frame number:
Have you looked at the
Statistics->Conversations: UDP
tab?If you can identify the conversations there is a column for Bits/s.
I have looked at statistics->conversations just now and it does have a Bits/s tab but it's not what im looking for since it just states for each udp port separately :(
(Thanks @grahamb for fixing the typo)
If you set a display filter of
(udp.dstport == 9) || (udp.dstport == 7522)
how many conversations are there?Screen shot in the man page is of the
TCP
tab but maybe ok for discussion.https://www.wireshark.org/docs/wsug_h...
There is three conversations with or without the filter :/ there each for different udp ports
I think setting a range with the start and end packet numbers for the port 7522 stream is quickest.
If you're going to be doing this pretty often then a script with
tshark
would be a good solution.So you reckon the way I already mentioned with the range of first and last packet is an acceptable way to achieve what I’m looking for? I don’t think I’ll bother with a script since I won’t be doing it too often, thanks though